Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.Oct 14, 2026
- Critical9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and Oct…Oct 13, 2026
- Critical9.9Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result i…Oct 13, 2026
- Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.Oct 13, 2026
- Medium6.1A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7…Oct 13, 2026
- Critical9.3CVFS contained an input validation issue affecting command execution.Oct 13, 2026
- High8.7IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controll…Oct 12, 2026
- High7.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Tech…Oct 12, 2026
- Critical9.4OpenSpug File Transfer transfer os command injectionOct 11, 2026
- High8.4ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c.Oct 10, 2026
- Critical9.3MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command.Sep 3, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityKEVEPSS 9.9%Sep 1, 2026
- High8.6Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.Aug 24, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityKEVEPSS 71.7%Aug 13, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityKEVEPSS 1.0%Jul 27, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityKEVEPSS 2.1%Jun 26, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 76.1%Jun 9, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityKEVEPSS 99.9%Jun 9, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…May 12, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.May 7, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…Apr 17, 2026